Land #11160, Add CMDSTAGER::SSL datastore option

rapid7 · Dec 21, 2018 · 620c411 · 620c411
2 parents 8f61fe4 + b4ff3b5
commit 620c411
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/lib/msf/core/exploit/cmdstager.rb b/lib/msf/core/exploit/cmdstager.rb
@@ -56,7 +56,8 @@ def initialize(info = {})
     register_advanced_options(
       [
         OptEnum.new('CMDSTAGER::FLAVOR', [false, 'The CMD Stager to use.', 'auto', flavors]),
-        OptString.new('CMDSTAGER::DECODER', [false, 'The decoder stub to use.'])
+        OptString.new('CMDSTAGER::DECODER', [false, 'The decoder stub to use.']),
+        OptBool.new('CMDSTAGER::SSL', [false, 'Use SSL/TLS for supported stagers', false])
       ], self.class)
   end
 
@@ -129,6 +130,7 @@ def generate_cmdstager(opts = {}, pl = nil)
     self.stager_instance = create_stager
 
     if stager_instance.respond_to?(:http?) && stager_instance.http?
+      opts[:ssl] = datastore['CMDSTAGER::SSL'] unless opts.key?(:ssl)
       opts[:payload_uri] = start_service(opts)
     end